$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: z1jbw0BE8IcSjpsK039W0eBBFwapwVw4SOk2LP+q3jM= Subject key identifier: 55:35:98:90:30:79:B5:F7:34:74:43:92:67:71:DE:E1:21:DE:BC:42 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0A63 Signing time: Sun 02 Nov 2025 19:39:53 +0000 Manifest this update: Sun 02 Nov 2025 19:39:52 +0000 Manifest next update: Sun 09 Nov 2025 19:39:52 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: UQu7ekbIyTVarL4rtxalvI2mIxFn7ov5mVvHNqiRNhY=) 2: 59E4B0A81B9211F0A5D50649C4F9AE02.roa (hash: 4uAphyYn6AbiifiDtaxCom6jwozyhzmoBVY1cw2irI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: Nov 2 19:39:52 2025 GMT Not After : Nov 9 19:39:52 2025 GMT Subject: CN=6907b388-3dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:f7:b0:68:67:28:1a:5f:f8:62:02:91:d4: fa:6e:d0:31:5c:93:10:a4:f5:cb:44:be:ed:5a:53: b3:6b:06:e4:f2:7b:1e:b1:cc:b7:9d:99:05:58:1a: 3f:5d:d9:90:b9:3c:a1:2c:2b:88:29:b9:33:c1:c9: c4:1c:57:e3:b3:7a:7d:28:b4:30:4a:41:fb:e8:ae: 1c:e4:e9:89:b7:5e:c9:04:a8:5d:d9:36:ed:85:47: ec:d0:3a:d8:cd:ec:5d:fd:3b:52:74:dd:87:9f:8c: 1c:52:74:c8:1c:25:39:84:eb:5e:cc:56:b2:0d:f8: 23:bb:d0:e1:69:f7:8d:5b:72:b4:61:2b:33:8f:3a: 33:44:d4:fc:55:c6:89:3b:cd:3c:15:ec:8d:84:db: 49:42:34:55:6d:26:bc:bc:40:7b:e4:78:8f:16:30: f7:c6:ca:a5:1c:34:f4:f1:4e:62:08:0c:60:e2:5a: b2:c9:1e:e5:57:26:77:34:7a:90:09:95:a4:fa:3c: 03:ee:44:53:c8:7f:9b:1f:31:ba:af:5d:35:42:3c: 60:86:b1:56:9e:5c:48:3c:39:bb:5b:51:cc:96:9c: d0:12:a1:c1:aa:b5:da:47:00:dc:53:f2:42:12:73: f3:9e:29:91:e0:68:e0:c6:f9:5d:ab:13:7a:6a:e0: 2a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:35:98:90:30:79:B5:F7:34:74:43:92:67:71:DE:E1:21:DE:BC:42 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2e:c0:da:ed:1e:27:b4:78:98:b1:b0:4e:69:cf:6a:e8:1b: 69:0e:4e:44:8f:b8:9b:23:64:22:7e:9d:0e:54:00:b3:8f:1f: 8c:12:e5:76:2f:1c:2f:93:35:9c:74:58:10:52:22:b1:ca:d0: a4:7a:0e:7c:12:31:5d:1d:85:bc:77:40:d2:f1:49:47:26:de: 18:b7:6d:7f:ff:d9:6e:6c:8d:a5:e3:01:89:d5:47:12:ae:97: fa:ec:9d:cb:89:4f:72:04:aa:8e:2a:95:3b:c0:d1:02:8b:2e: 1b:cd:4d:88:04:fb:a5:d7:ff:14:63:4a:1e:6d:b4:f3:55:72: 8b:cc:27:7c:05:50:83:f1:0c:76:d7:07:2a:0c:c8:7c:1c:fa: e3:24:bd:69:bc:8b:18:97:00:4f:d3:4a:f3:a4:f6:66:2d:0e: 0b:d0:6d:52:dd:9c:9e:b6:59:e9:fa:ed:22:30:39:3c:0a:26: 66:a1:2b:6c:8c:67:4d:4c:ea:f9:6f:fc:f2:52:fa:cb:ee:c8: c3:96:f7:ac:72:53:88:0a:27:c2:42:17:75:cc:5e:7c:25:25: b2:36:9e:39:5e:e0:8f:f2:a8:5f:90:93:8b:c1:b2:3f:c4:32: ce:c1:03:76:99:fa:f0:9e:6d:d1:48:dc:1e:41:0f:dd:d8:f0: 0d:96:c7:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjUxMTAyMTkzOTUyWhcNMjUxMTA5MTkzOTUyWjAYMRYwFAYD VQQDEw02OTA3YjM4OC0zZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBv3sGhnKBpf+GICkdT6btAxXJMQpPXLRL7tWlOzawbk8nsescy3nZkFWBo/ XdmQuTyhLCuIKbkzwcnEHFfjs3p9KLQwSkH76K4c5OmJt17JBKhd2TbthUfs0DrY zexd/TtSdN2Hn4wcUnTIHCU5hOtezFayDfgju9DhafeNW3K0YSszjzozRNT8VcaJ O808FeyNhNtJQjRVbSa8vEB75HiPFjD3xsqlHDT08U5iCAxg4lqyyR7lVyZ3NHqQ CZWk+jwD7kRTyH+bHzG6r101QjxghrFWnlxIPDm7W1HMlpzQEqHBqrXaRwDcU/JC EnPznimR4GjgxvldqxN6auAqvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU1mJAw ebX3NHRDkmdx3uEh3rxCMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXLsDa7R4ntHiYsbBOac9q6BtpDk5Ej7ibI2Qifp0OVACzjx+MEuV2 LxwvkzWcdFgQUiKxytCkeg58EjFdHYW8d0DS8UlHJt4Yt21//9lubI2l4wGJ1UcS rpf67J3LiU9yBKqOKpU7wNECiy4bzU2IBPul1/8UY0oebbTzVXKLzCd8BVCD8Qx2 1wcqDMh8HPrjJL1pvIsYlwBP00rzpPZmLQ4L0G1S3Zyetlnp+u0iMDk8CiZmoSts jGdNTOr5b/zyUvrL7sjDlvesclOICifCQhd1zF58JSWyNp45XuCP8qhfkJOLwbI/ xDLOwQN2mfrwnm3RSNweQQ/d2PANlscn -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:09 2025 by rpki-client